CWE-484
Omitted Break Statement in Switch
The product omits a break statement within a switch or similar construct, causing code associated with multiple conditions to execute. This can cause problems when the programmer only intended to execute code associated with one condition.
Impactr finds and proves whether CWE-484 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.